CVE-2026-77010
HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom, including one protected by an access code, and to join it with moderator privileges.
| Vendor | unknown |
| Product | hel online classroom: ai-powered online classrooms |
| Published | Aug 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown hel online classroom: ai-powered online classrooms
Be the first to know when new unknown vulnerabilities affecting unknown hel online classroom: ai-powered online classrooms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / HEL Online Classroom: AI-powered Online Classrooms
0 ≤ 1.0.3
References
Credits
kimsunghoon WPScan